CVE-2020-27670: Debian Linux

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry can be half-updated.

Affected products

• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 31 only
• Opensuse Leap: version 15.1 only; version 15.2 only
• Xen Xen: up to and including 4.14.0

Published 2020-10-22. Last modified 2026-06-17.